Remote Attestation and HTTP Header

ID 660136
Updated 1/25/2017
Version Latest
Public

author-image

By

Intel® Software Guard Extensions (Intel® SGX) remote attestation feature can be implemented by ISV service providers, which includes use of the Intel® Attestation Service API. An ISV service provider interacts with Intel® Attestation Service using REST APIs and an example implementation of this feature is available here.

When the REST APIs fail for any reason, it is recommended to log the header called Request-ID that is part of the HTTP response to the API. The value of Request-ID contains a randomly generated unique identifier (UUID) which can be used to track an individual HTTP request. In case of error, the value of this header should be logged by the ISV service provider which will assist in troubleshooting the issue.

The sample available here at this time only logs the Request-ID along with the HTTP headers only on successful report retrievals. In order to log the headers in error scenarios also, the following changes can be made.

Intel® SGX Remote Attestation - Logging the HTTP Header